Extracted

• • Target
    genp-3.8.0-src/GenP/GenP-3.8.0.au3
  • Size 133KB
  • SHA256 0ccb8be7f0722b5088d33c3663234fa1f2f598d29ad70fcc8a05200f2d202ac8
  • MD5 88fbad5105ac33f8387219c77ac95c4b
  • SHA1 afb189fecf60e3d7463f198add7dbb18c968d6a2
  • SHA512 752213490f6c66fb2aec0e684f804d90865edbf195cd9ff0fdf72add07f9481031117575d1d69f1b38b755682f7b7dfe2df1e57d7907a560a924e9eba8885482
  • SSDEEP 3072:h7L3Pb2sYWugo9fl99zKS/ECNL4MAjaL2L0tII:1P+WugOH9ECNL4vj0tII
  • TLSH
    T10AD3C509FC2F088A7659F166B9B78D59F61FE86AD6392194F87DCC6C104442C90ECACF
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral1behavioral2
• • Target
    upx-5.0.1-win64/upx-doc.html
  • Size 37KB
  • SHA256 f308ba932cfe33da54b33b21ccef83f073ab1a208bee54a5b6fa22963e7f663f
  • MD5 cc0164496a03755ddcbc2a8f29dd5b90
  • SHA1 be9995bb184b8a40d2357cb960c506f3f3c5cdee
  • SHA512 4dba4a7a1b364b60b1a0b06e19e77314756bfc478e7b9046add619690ad648431e1fa9cfcccfee9f50f992b4c5ab61870fd92d01c02f78b353b3f08f11ac967b
  • SSDEEP 768:NWHwJhpQ/Yh7xxDmoyW4WB8FmS7lkUcyhE2UcyhEEoam4qKTwRwQTnIkonb4h:wHwJhpQ/+7XR4WsJkdOE2dOEEq4pTwRD
  • TLSH
    T1A403E976C75D13B304C5AA797F19A6DD9B2AA32C323222D0B84D820DA30593855FFBF5
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    upx-5.0.1-win64/upx-doc.txt
  • Size 36KB
  • SHA256 cdfbf5d3955da09942c1993d8e9049ea47709765cae5ddf134e8bf0856a28435
  • MD5 2b20cf0d043c8b5c0fc0f27aecef750d
  • SHA1 12f10bf0605dfc46233846f3801b86e15dc109a0
  • SHA512 3bf5914ffd9b8cfdb46b1ea58d0deedc6518ede533038fc54f48e04481bbf8ae0aade1970699a5384aba5cd11855c621529707a5e702ee04728c37037b41c055
  • SSDEEP 768:PmW5wh5hr32FGhyidWclu84ZyrtkwKK6kwKKOM6dftXEY3y3X78Swxw+9:Pl5wh5hr+3igclu84Y5Z65ZOtVXEY3Uk
  • TLSH
    T16FF2C66A9B4813F615824A716FDDDBCA5726D22B32326550B8DD820C1F05D385AFBBF0
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral5behavioral6
• • Target
    upx-5.0.1-win64/upx.1
  • Size 39KB
  • SHA256 406c403c530a928e3f090d4872809ca57c9d72d9e33b15ff0ebcf572bb182451
  • MD5 cc9d2d9860b8397a7de936120e26f04e
  • SHA1 b1015aff97afa5ca538ebeb0c17c6cf835cbf068
  • SHA512 33261a23fa8279d2600eb6925662eb01c0b30b0611d95d52b992b2f29be6cf390a37ebb14bdd08981c2019f9f986bfd566160fe734eac7f044359e5bb41e47cc
  • SSDEEP 768:4buWbuszVANCMGjfiqmjsl70EWmHkSJ+TdbFiG1mfUkghDUkgq7WczzofcfodPgn:GbuszVANC1tmmw3mHkSs5bFiu0xghDxp
  • TLSH
    T1D203E877468D13B51E8159D05F19AAC95725E22A3332D164F9AC810DE301A3F8AFBBF3
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  execution

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral7behavioral8
• • Target
    upx-5.0.1-win64/upx.exe
  • Size 585KB
  • SHA256 8def9daba0817636962e60878e117ee1dcba6c3f64fb4bc13449d447385f1b5b
  • MD5 a14acd4e0fd7f388b6c42cde82fec28b
  • SHA1 475dc900fe226a6bda388fcf861a2c83b269fccd
  • SHA512 a7393ce2597adf34077649d757ea3a378abdc9dfc4424300d332d8e1476deac8397e5ca5da62aca46bc3aeb1078a62f8a70433e6db0872c086647e05d7cb3b32
  • SSDEEP 12288:EB3+loKiHEbMXeYJdRSGlv0I95DJeYB5P8Lepdn2DGMNbhEtPNi6Qe2:EZWXi9RXhZ9xo45P8LeLyzIPPd
  • TLSH
    T1ECD423AB5831B877C72003FDAC8C9546B3A0769CD1EFE24ED0CAD7669039DEA6154738
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  5^/10

  upx

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral10behavioral9
• • Target
    genp-3.8.0-src/WinTrust/patch_wintrust.ps1
  • Size 1KB
  • SHA256 a73b572bbf1ddbf7d9f5a03ea5ecf9e2c296ecbefbc60104656f21644b20b2f2
  • MD5 4c1563eb08376a1fc0979a18c1df28fc
  • SHA1 00cd35fb7cc22f4a8f609fce569f93d79ad66021
  • SHA512 4b5b48bbae0679e6efff4c852d69218f66ab29634eaa2e76f2c3b19c3e7836903b488c13b58f485b55bfd0ff92fdbbbdbfc22cacb8ffe0e814fb3ae769be11f3
  • TLSH
    T17841C0225D41C31481F70F17056A8564EDA7723FB244AA10747CC354AFB4F2ECA61DEE
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral11behavioral12
• • Target
    genp-3.8.0-src/WinTrust/wintrust.dll
  • Size 373KB
  • SHA256 ecb263d1f71b514cbd3abae65bac84942355e0c2b31c3c11ba35709716caaee4
  • MD5 1b3bf770d4f59ca883391321a21923ae
  • SHA1 b45e3a82acda5ffa59716ee3e6f2c7c36063d671
  • SHA512 581a823a8371c830add8821af3b6ad3b15ccb51fc04adfc83d2cb20ed8c38c31416fad3ddddea34064dbf1a36e4ecab04659f26f66d265f07e044ab6147d4ef1
  • SSDEEP 6144:pgCBP6xz5/RZdpcIJJlmWnoBdM6DxlWGqrJvuxS2WeTwNLZLV/M9iQZoBNmlK/oW:CkPY/Vpc0JHWDxlRqb5qK/R
  • TLSH
    T10B844A2EA6F910A4D8B6913885538206D6737874237196CF429CC6BD9F2BFE47A3DF01
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  • Manipulates Digital Signatures

    Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

  behavioral13
• • Target
    genp-3.8.0-src/build.ps1
  • Size 18KB
  • SHA256 14be137b4644140653363fa7b13ada4b66e50a57257226bd231d62aadf8364ae
  • MD5 3489ee25b34b46deabe8d371ee8b0d76
  • SHA1 2a6a17729cba08dcc18db071ef3b2db62c1e6721
  • SHA512 ec2d55c57bfc474276a270e04d870dbe3d7324d4fdc0f16f48783c4dc22fd618bc43e3d4608e0dd0cef29aaff12c4c1188ca5fb14c01ecda9f5f5a9af2f793a5
  • SSDEEP 192:dh3auTbrrPixXPIyoP3s9LKE87Focy2/aXVL1bpmyU5XVL1Gp43rHRX0frzNJt:3x89LKE/2yq0jzNJt
  • TLSH
    T17B82B61D6982821982F31B7E8B969298ED9B01BF43451780747CC187BFB163FCB91E97
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral14behavioral15
• • Target
    genp-3.8.0-src/run_build.bat
  • Size 535B
  • SHA256 e89150350b8b4d6957c180b8c044f367cdea8d0d0b71c8f59dca8f9ec99a2be5
  • MD5 2a1b445614f030c40fb92204611c1034
  • SHA1 16ca04b1ab1e42d16cfb4bf88b461adc82537b3e
  • SHA512 87e0d358c98fd77f7556ab5c4a5b5718892de7a6c25d85badab6ca66fd9b0819dbbe3c6408cadf2d17079e521ab5f120c7c1f6597bf777645102c8df9421ff31
  • TLSH
    T125F08B0B3A88DBB803F144A345F4DEB2DC66431B7400E4C674280C50BF1A6809BF1FC9
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral16behavioral17